Before you start

verify your environment meets these requirements supported hardware {{k3}} , application version 6 3 1 3 and later, with the external secret storage license enabled and initial setup completed (including loading a platform master key and network configuration) supported operating systems windows 10 and later linux required access an account on the kmes with administrator permissions to create roles, identities, tls pki, and update system settings local administrator/root access on the computer running hashicorp vault network and firewall allow outbound tcp port 2001 (default host api port) from the hashicorp vault server to the kmes series 3 endpoint, specified by fqdn (for example, kmes example com ) or cidr (for example, 10 0 0 0/24 ) tls inspection or ssl proxies can break mutual tls handshakes exempt the kmes fqdn(s) from inspection configure the kmes series 3 with a fqdn so the exemption applies other openssl hashicorp vault application ( https //developer hashicorp com/vault/downloads https //developer hashicorp com/vault/downloads )